CVE-2024-47058
Fixed upstream EPSS <1%CVSS 2.9
With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session.
Products: Mautic
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | mautic/core | 5.1.1 |
| Packagist | mautic/core | 4.4.13 |
| Packagist | mautic/core-lib | 5.1.1 |
| Packagist | mautic/core-lib | 4.4.13 |